PT-2026-25215 · Delphiknight · Geo To Lat

Nabil Irawan

·

CVE-2026-32368

·

Publicado

2026-03-13

·

Atualizado

2026-03-15

CVSS v3.1

8.5

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions delphiknight Geo to Lat versions through 1.0.19
Description The software contains an Improper Neutralization of Special Elements used in an SQL Command issue, specifically a Blind SQL Injection. This allows for potential unauthorized access to data through crafted SQL queries. The vulnerability exists in the geo-to-lat functionality. The vulnerable component allows for Blind SQL Injection.
Recommendations Upgrade to version 1.0.20 to address the issue.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-32368

Produtos afetados

Geo To Lat